Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier: Vx9QckvM0/Mpe+0sRppQGdZoSndm+HC2wEmAkQsyV3E=
Subject key identifier: C7:66:D3:BA:D1:1D:4D:5F:86:36:ED:0F:48:3B:B9:80:39:AA:D4:A1
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial: 0194C3875E95C0A5A147BD371E3209C357E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number: 112A
Signing time: Sat 01 Feb 2025 22:00:16 +0000
Manifest this update: Sat 01 Feb 2025 22:00:16 +0000
Manifest next update: Sun 02 Feb 2025 22:00:16 +0000
Files and hashes: 1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=)
2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: 87hgpARh8z+ccsEfpNdrqYih6eKkD+Ki0ib94wyuniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:5e:95:c0:a5:a1:47:bd:37:1e:32:09:c3:57:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Validity
Not Before: Feb 1 22:00:16 2025 GMT
Not After : Feb 2 22:00:16 2025 GMT
Subject: CN=c766d3bad11d4d5f8636ed0f483bb98039aad4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:30:51:89:73:3e:af:a3:46:a4:ca:3a:8f:
80:ff:55:21:f4:d0:71:80:d9:fb:e8:45:f6:af:3c:
88:ce:15:6d:b3:32:95:fb:e1:80:17:22:0d:b0:b2:
94:84:0b:c1:42:ae:c7:84:77:e7:b9:20:b4:a1:90:
29:06:56:b6:b0:a4:2b:26:b2:ff:03:c0:fc:54:97:
a6:44:85:9c:cb:a0:25:57:30:4f:83:68:82:75:09:
e6:13:0f:73:dd:03:db:40:5e:00:2c:60:e3:49:4e:
34:1a:aa:10:f5:17:e7:fc:e7:1f:53:bc:de:0f:87:
70:ed:9b:19:df:98:ee:0a:e6:a6:8f:ef:ec:72:c6:
90:11:d9:60:f9:8e:d7:34:22:8c:56:d3:a7:3a:7b:
97:0a:03:55:59:6e:f4:07:03:71:71:bd:21:89:da:
23:92:84:5b:35:00:0f:99:cf:ea:c2:29:b3:9e:ef:
9e:2a:19:35:1a:3d:c0:3e:c7:a7:5d:d3:12:11:6e:
2a:96:e5:66:7b:77:ce:a5:11:8d:6f:d5:14:88:49:
50:34:5d:22:8a:8c:8c:10:ce:9b:fa:87:39:14:d5:
70:27:a9:31:fd:c2:05:88:bc:35:55:79:a8:58:19:
37:5d:7f:5f:aa:c8:08:74:fd:5e:56:aa:41:32:52:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:66:D3:BA:D1:1D:4D:5F:86:36:ED:0F:48:3B:B9:80:39:AA:D4:A1
X509v3 Authority Key Identifier:
keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:db:72:55:a9:94:36:b9:c8:ef:de:f5:07:95:22:88:4e:b9:
f9:f7:f0:94:0c:e8:be:4a:d7:cd:1d:a1:9d:68:93:ee:88:ab:
6d:75:10:32:02:b4:27:6b:99:e5:92:b4:e4:64:de:78:da:73:
50:cc:07:04:12:fd:6e:0c:93:6d:58:f6:65:f2:00:36:5d:54:
c3:a8:85:9e:10:96:59:ce:b3:8a:2d:ec:0b:ec:ea:2e:91:99:
3e:02:01:84:a2:24:fa:ca:4c:13:ec:94:91:53:44:73:97:ca:
61:7e:00:ea:68:20:0e:a9:6b:f6:a2:ad:02:85:63:bb:b7:f6:
58:33:36:20:0a:a6:7e:7a:53:b0:63:22:cc:e0:6b:f7:3d:bb:
6d:c3:fe:88:98:ae:88:99:7a:c8:46:2c:92:9f:9a:e2:47:5f:
1d:09:9e:d3:09:32:fc:f3:ad:4b:29:fa:c5:ba:1e:79:db:81:
d8:90:33:c5:c0:f8:03:e1:80:75:4e:68:a6:8d:4f:df:8e:8b:
bc:c2:c1:e8:67:c8:63:11:e8:ce:4a:0b:4b:9e:b1:db:43:ca:
58:da:02:f9:2d:57:2f:1c:93:2f:49:e0:48:c1:ba:2a:0a:b4:
f3:f0:c4:0f:05:55:87:4d:42:c7:e5:f1:ff:29:c5:6b:8a:04:
c8:1e:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:15 2025 by rpki-client